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Abstract. Nonsingular derivations of modular Lie algebras which have finite multiplicative 
order play a role in the coclass theory for pro-p groups and Lie algebras. A study of the set 
Mp of positive integers which occur as orders of nonsingular derivations of finite-dimensional 
non-nilpotent Lie algebras of characteristic p > was initiated by Shalev and continued by 
the present author. In this paper we continue this study in the case of characteristic two. 
Among other results, we prove that any divisor n of 2* — 1 with n* > (2^ — n)^ belongs to 
A/2. Our methods consist of elementary arguments with polynomials over finite fields and a 
little character theory of finite groups. 



1. Introduction 

A classical result of Jacobson (proved in |,Tac55j and also listed as Problem 9 of Chapter II 
in j,Tac79l p. 54]) asserts that if a finite-dimensional Lie algebra L over a field of characteristic 
zero admits a derivation D which is nonsingular (that is, injective), then L is nilpotent. Jacobson 
also proved that the analogous result holds in prime characteristic provided L is restricted. In 
absence of the restrictedness hypothesis some other assumption on L or D is necessary to preserve 
the conclusion that L is nilpotent. 

A striking instance of such a result occurs in the effective proof given by Shalev in |Sha94b| of 
the strongest of the coclass conjectures of Leedham- Green and Newman for pro-p groups LGN80 . 
A simple but crucial step in Shalev's proof is the fact that a finite-dimensional Lie algebra over 
a field of characteristic p > having a derivation D with D^"^ = 1, that is, nonsingular and 
with all eigenvalues in the prime field, must be nilpotent |L(tM02I Proposition 5.2.8]. 

Because of the importance of the above fact it would be interesting to know to what extent 
the hypothesis on the order of D can be weakened. There are at least two natural ways in which 
this hypothesis may be weakened, the first one being imposing that ~^ = 1 for some positive 
integer k. This hypothesis is insufficient as soon as fc > 1, because for all fc > 1 there exist even 
simple finite-dimensional Lie algebras of characteristic p which have nonsingular derivations of 
order p*^ — 1, namely, certain algebras discovered by Albert and Frank |AF55j in the fifties. 
These Lie algebras, which belong to the larger class of Block algebras and are usually denoted 
by Hi2 : n; <I>(t))'^^^ as in were employed in |Sha94aj to construct the first examples 

of non-soluble modular graded Lie algebras of maximal class, thus disproving the analogues of 
Conjectures C and D of |LGN80j for modular graded Lie algebras. They later turned out to be the 
building blocks for the construction of all graded Lie algebras of maximal class (generated by their 
homogeneous component of degree one) over fields of odd characteristic |CMN97l ICNOO) . We 
should also mention in this connection that Benkart, Kostrikin and Kuznetsov have determined 
in BKK95 all finite-dimensional Lie algebras over an algebraically closed field of characteristic 
p > 7 which admit a nonsingular derivation. We refer to the Introduction of |CM05j for a broader 
discussion and references on these (and related) topics. 
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A second way of weakening the assumption that D^^^ = 1 is imposing an upper bound on the 
order of the derivation D. In this direction, Shalev proved in Sha99 that a finite-dimensional 
modular Lie algebra with a nonsingular derivation of order less than — 1 must be nilpotent, 
where p is the characteristic of the underlying field, which we assume without mention from now 
on. This result is best possible because of the Lie algebras of Albert and Frank mentioned in 
the previous paragraph. 

Shalev suggested in |Sha99j the more general problem of studying the set Mp of positive 
integers which occur as the orders of nonsingular derivations of finite-dimensional non-nilpotent 
Lie algebras of prime characteristic p. Thus, we know that J\fp contains all numbers of the form 

— 1, for all fc > 2, and Shalev proved that — 1 is the smallest element in Mp. We extended 
Shalev's result in |Mat02j by proving that for p > 3 the only numbers in A/'p which are less than 
p^ ~ 1 are multiples of — 1. 

The key for proving these and similar results is the following translation of the problem into 
one formulated entirely in terms of finite fields. A positive integer n belongs to J\fp if and only 
if there is an element a G Fp (the algebraic closure of the field of p elements ¥p) such that 
(a-fA)" = 1 for all A G Fp. The necessity of the condition was proved in |Sha99| by means of the 
Engel-Jacobson theorem, and the sufficiency in |Mat02| by means of an explicit construction. 
We comment more on this characterization of A/'p and a further one at the beginning of Section|21 

In the present paper we continue the study of A/'p which was initiated in 'Sha99' and j Matn2| . 
with special emphasis on the case where p = 2, because of reasons which we explain below. The 
characterization of Mp recalled in the previous paragraph allows us to forget about the origin of 
the problem in the theory of Lie algebras. Thus, no knowledge of Lie algebras is necessary to 
understand the paper beyond this Introduction. We briefly describe the contents of the paper. 

It is easy to see that TVp contains all multiples of its elements. Shalev exhibited in jSha99j 
some elements of A/'p which are not multiples oi p'' — 1 for any k > 1, namely, {p^ — l)/{p — 1) 
for p odd, and 73 for p = 2. In Section [21 we generalize this latter example to show that 
((/■^ — l)/((7 — I) ~ q-^ + q + 1 e A/'2, for all q — 2'^ with s > I. The argument lends itself to a 
further generalization which might be of independent interest, on the period of a polynomial of 
the form ca;'^^ -I- dx'^ — ax — b € ¥ q[x\, where q — p^ and p is any prime. 

In Section 121 we show the abundance of elements of M2 by proving that all divisors of 2*^ — 1 
which are "large enough" belong to M2- More precisely. Theorem 13.11 the main result of this 
paper, states that if n is a divisor of 2*^ — 1 such that > [2^ — n)'^, then n G N2- It follows, 
in particular, that {q^ — l)/{q — 1) G N2 if (7 = 2* with s > 1 and i > 3. (The case i = 3 
escapes Theorem 13 . II but is dealt with directly in Proposition [^1 the case t = 4 admits also an 
independent proof, as in Proposition 14.41 1 The proof of Theorem 13. II is based on the character 
theory of a certain Frobenius group, but the method does not appear to extend to characteristics 
higher than two. These require more sophisticated tools, and we plan to deal with them in a 
future paper. We conclude Section O with a discussion of the set of multiples of numbers of this 
form. 

In Section 21 we introduce a problem which extends the mere determination oi Afp. For any 
positive integer n prime to p let Ep{n) denote the set of elements a G Fp such that {a + A)" — 1 
for all A G Fp. Then n G JVp occurs exactly when Ep{n) is not empty. We hope that a study 
of Ep{n), or at least of its cardinality, may shed some light on the structure of the set Ap, 
even though it is not presently clear what significance this additional information may have 
for nonsingular derivations of Lie algebras. Besides its intrinsic general interest, this study has 
also computational motivations which we explain in Remarks 14.21 and 14.51 After the technical 
Lemma I4. II which gives an alternative and somehow more convenient way of determining Ep(n) 
than that suggested by its definition, in Proposition 14.31 we explicitly determine the set E2{n) 
for n = (2"^* — 1)7(2'' — 1) as the set of roots of a certain polynomial. A similar approach to 
n = (2^* — 1)7(2'' — 1) only produces a direct proof that E2{n) is not empty, and thus n G A/'2, 
in Proposition 14.41 Although this statement is also a consequence of Theorem 13.11 as noted 
in the previous paragraph, the proof of Proposition 14.41 has a constructive content explained 
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in Remark 14.51 We conclude this section by producing a complete description of Ep{n) for 
n — {pP — l)/{p — 1), which is the example of nontrivial element of Afp for p odd exhibited by 
Shalev in |Sha.99j . 

2. Some more numbers in M2 

We quote one of the main results of |Matn2l . which appears there as Corollary 2.3. 

Theorem 2.1. Letp be a prime number and let n be a positive integer. The following conditions 
on n are equivalent: 

(1) there exists a finite- dimensional non-nilpotent Lie algebra of characteristic p with a non- 
singular derivation of order n; 

(2) there exists an element a GVp such that {a + A)" = 1 for all X £ Fp/ 

(3) there exists an element c G F* such that ~ x — c divides a;" — 1 as elements of the 
polynomial ring ¥p[x]. 

The version given in |Mat02j has the additional hypothesis that n is prime to p. This is 
superfluous since each of the three conditions holds for n if and only if it does for its p'-part. (For 
the first condition this is shown in |Mat02| or | Sha99| .) As we have recalled in the Introduction, 
the contribution of |Mat02| to this result is a proof that the second condition implies the first 
one, while the converse had already been proved in Sha99 . Although Lie algebras provide the 
motivation for this study, we will not use them in this paper, but only investigate the set TVp of 
numbers which satisfy the second condition. 

Before proceeding with the study of J\f2 in this and the next section, we briefly elaborate on the 
second and third condition in Theorem l2.1l For n prime to p let Un denote the (unique) subgroup 
of F* of order n. Then condition (2) has the geometric interpretation that Un contains an afhne 
Fp-line (that is, a one-dimensional afhne Fp-subspace of Fp) with direction 1. (In Section 0] we 
address the more general problem of determining the number of such lines.) It follows that 
TVp contains all numbers of the form p^ — 1 with r > 1. In fact, as we have mentioned in the 
Introduction, for each of these numbers there exists even a simple Lie algebra of characteristic 
p with a nonsingular derivation of order n. Since J\fp is evidently closed under taking multiples, 
it contains all multiples of numbers of the form p^ — 1 with r > 1. We may call these the trivial 
elements of Afp. Condition (2) is clearly equivalent to the p polynomials {x + A)" — 1 for A G Fp 
having a nontrivial common factor, and this suggests an algorithm to check whether a specific 
number n belongs to A/"p. In Lemma l4. II we present a different algorithm, based on condition (3), 
which has some advantages over the former, as we discuss in Remark 14.21 It appears that 
condition (3) is also more suited than condition (2) to dealing theoretically with small values of 
n. In fact, the complete description of all elements of Afp smaller than p^, which we obtained 
in ,.Mat^2) extending a result of Sha99l (see the Introduction), is based on condition (3). 

In |Sha99| Shalev exhibited one non-trivial element of Afp for each prime p. Since the period 
of the polynomial x^ — x — 1 divides {p^ — l)/{p — 1) (see |Sha99l Example 2.6]), this number 
belongs to Afp, according to condition (3). It is easy to see that {p^ — l)/{p — 1) is prime to 
any number of the form p^ — 1 with p \ r. In particular, for p odd it is not divisible by any 
number of the form p^ — I with r > 1, and hence it is a non-trivial element of Afp. For the 
remaining case p = 2 Shalev showed in jSha991 Example 2.5] that 73 G Af2, quoting from the 
table in |LN83I p. 378] the fact that the (irreducible) polynomial x^ + x + 1 G F2[x] has period 
73 = (8'^ — l)/(8 — 1). Thus, if a is any root of the polynomial (in F512) then a^^ = 1, and also 
(a -I- 1)^'^ = 1 since a -\- 1 = a^, proving that 73 G Af2 according to condition (2). 

The particular form of the polynomial used by Shalev suggests a direct computation of its 
period, and the following extension of Shalev's example. In the paper we will often use the 
standard notation q for 2^* or 2^, depending on the context. In doing this, we will implicitly 
assume that q is the cardinality of a field, and thus that s, fc > 1. 

Proposition 2.2. If q = 2^*, then the number (g"^ — l)/{q — I) = q^ + q + 1 belongs to A/2. 
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Proof. Consider the polynomial a;'?+^ +x+l, where q = 2^. Its period divides (g^ — l)/{q — l) = 
+ q + I, because 

z^'+^+i = {x^+^yx = {x + lyx = 2;'?+^ +x = l (mod + x + 1). 

In fact, its period equals q^ +q + l according to jBarOOl Proposition 2.3], but we do not need that 
fact here. Therefore, each root a of x'^^'^ + a; + 1 has (multiplicative) order dividing q'^ + q + 1. 
Furthermore, since a + 1 = a'^^ is a power of a, its order also divides q'^ + q + 1. (In fact, 
a + 1 has the same order as a, because {q + 1, q'^ + q + 1) — 1, but this is not essential in the 
argument.) We conclude that q"^ + q + 1 £ A/2. 

Although the proof is complete, in view of a generalization it is instructive to do the crucial 
computation again, in a more conceptual way. Congruences between polynomials will now 
denote equality of their images in the quotient ring ¥2[x]/{x'^^^ + a; + 1). In particular, we have 
a;^ = 1 + 1/x = (a: + l)/a::, because the image of x is invertible in the quotient ring. Since taking 
gth powers is a ring automorphism of F2[a;]/ (a;''^^ + x + 1), we have 

_ .x9 + 1 _ 1/a; _ 1 



xi 1 + 1/a; a: + l' 
9' = 2: . £+1 . 1 ^ 1. □ 

Note that the polynomial + x + 1 is almost never irreducible. In fact, since it splits into 
a product of linear factors over F^3 , it can be irreducible over F2 only if its degree q + I divides 
3s, which occurs only for s = 1,3. 

Of course, many of the elements of Af2 given by Proposition 12.21 are not really "new" . In 
particular, it is immediate that q'^ + q + 1 is a multiple of 7 = 2^ — 1 unless s is a multiple of 
three. It is also easy to see that q^ + q'^ + 1 is a multiple of 73 unless s is a multiple of three. 
In fact, the really "new" elements of A/'2 produced by Proposition 12 . 21 are those for which s is a 
power of three. We postpone a precise statement and a proof of this fact, in greater generality, 
to Proposition 

The crucial computation in the proof of Proposition 12.21 generalizes to show the following 
result, which may be of independent interest. 



Proposition 2.3. Let p be a prime, q = p" , M — 



e GL2((?), and f{x) = cxi+^ + 



a b 

c d 

dx'' — ax^b G Fq[a;] . Then the period of f{x) divides g" — 1, where u is the order of the image of 
M in the group PGL2((j'). (Equivalently, f{x) splits into a product of linear factors overFqu.) 

Suppose, in addition, that in the action of (M) by right-multiplication on the two dimensional 
row space over ¥q, the vectors (1, 0) and (0, 1) belong to the same orbit. Then the period of f{x) 
divides {q" — l)/('7 — 1), where v is the order of M in Gh2{q). 

Proof. We denote equality of images in the quotient ring Fg[x]/(ca;''^^ + dx'^ — ax — b) by a 
congruence sign. Since ad ^ be, the binomial ca; + d is invertible in the quotient ring, where 
we have x'^ = {ax + b)/{cx + d). By taking the g-th powers of both sides we obtain that 
x'' = {ax'' + b)/{cx'' + d), because a, b, c, d are invariant under the map a i— > a''. This calls for a 
further reduction of a;'. More generally, the powers a;' (in the quotient ring) can be computed 
by iterating the substitution a;' t-^ {ax + b)/{cx + d). Induction shows that 

(2.1) x"^ = where 

gx + h 

This also follows from the well-known faithful representation of PGL2(g) as the group of rational 
expressions of the form {ex + f)/{gx + h) ^ 1, with coefficients in F^, under substitution. We 
conclude that x'' = x, and hence the period of the polynomial f{x) divides — 1. 

To be able to strengthen our conclusion we impose the additional condition that the vectors 
(1, 0) and (0, 1) belong to the same orbit in the action of (AI) by right-multiplication on the two 
dimensional row space over ¥q. This means that some power of M has (1,0) as its second row. 



" e / ■ 




a b 


g h 




c d 



NONSINGULAR DERIVATIONS 



5 



Let V (a multiple of u) be the order of M in GL2(q). Then the numerators of the fractions which 
can replace the various factors x'' in the expression x'^'' ""'^^Z'^^"'^'' = a;- x'' •x'' ■ ■ ■ x'' according 
to formula l|2.1(l . are the same as as the denominators, just in a different order. Consequently, 
they cancel out and we obtain that x^^""^)/^*"^^ = 1. Therefore, under the present additional 
condition, the period of the polynomial cx^^^ + dx'^ — ax ~ b divides {q"" — 1)/ {q — 1). □ 

Our proof of Proposition 12.21 is the special case of Proposition 12.31 where q = 2'^ and M is 
the matrix [\q] of order three. Polynomials of the form x'^'^^ — ax — b occur in several areas 
of mathematics and have been extensively studied, see |Blu04| and the references therein. They 
are a special case of the projective polynomials of |Abh97| , and their connection with projective 
linear groups is much deeper than the superficial aspect employed in the proof of ProT)Osition l2.3l 
Unfortunately, it does not seem possible to use Proposition 12.31 to prove that (q* — l)/{q — 1) 
belongs to A/2, where q = 2"^, for values of t higher than three, although this conclusion is true, 
and follows from the more general results of the next section. See also Proposition 14.41 for a 
direct proof in case t = 4. 

3. A Frobenius group 

The main result of this section and of the paper, Theorem 13.11 produces many non-trivial 
elements of Af2- It shows that any subgroup of W*^ of order large enough with respect to its 
index contains an afhne F2-line with direction 1 . Our proof of Theorem 13.11 was inspired by 
an argument in Chapter VI of Fei t and Thompson's "Odd Order Paper" |FT63[ Lemmas 38.9 
and 38.10], as simplified in |Pet84[ Lemme 2]. I am grateful to I. M. Isaacs for pointing out to 
me that a generalization of this character-theoretic argument can be found in Fci67, Section 26]. 

Theorem 3.1. Let q~2*' and let [/„ be a subgroup of¥* of order n, with n"^ > {q — n)'^. Then 
there exists a G ?7„ such that a + 1 G ?7„. Consequently, n G 

Proof. Consider the semidirect product G of with an isomorphic copy U of its subgroup C/„, 
acting on Fg by multiplication. Let e be the number of elements a of Un such that a + 1 ^ Un- 
If g is any nonzero element of Fg, for example 5 = 1, then e is also the number of ordered pairs 
(u, v) of elements of C/„ such that gu + gv = g. Since the coset gUn of [/„ hi F* coincides with 
the conjugacy class /C of 5 in G, the number e is the so-called structure constant of G (strictly 
speaking, of the center of the complex group algebra of G) with respect to the classes /C, IC, K,. 
Thus e can be computed in terms of the (complex) characters of G, as in pa94l Problem (3.9), 
p. 44]. 

Since G is a Frobenius group with kernel F^, it has n linear characters, whose kernels contain 
the derived subgroup G' — ¥q, and further irreducible characters Xii for i ~ 1, . . . , (q — l)/n, 
each of degree n. Noting that Xi(ff) is an integer and, in particular, is real, it follows that 



|G| ^ x(l) q \ 



Therefore, we have qe — r?^ Xi^of' ■ If can show that the absolute value of xAdf" is 
less than r? , we conclude that e > 0. 

According to the second orthogonality relation for characters we have n -f X]iXi(.9)^ = 
^0(5)1 = 1- In particular, wc have |xi(ff)l !i (? ~ ri)^!'^ for all i, and hence 



X^{9f\ <max|x.(.9)| • Vx*(3)' < (g-")^/'- 



Therefore, under our hypothesis that n** > (q — n'f' we have qe > — | XiCff)'^] > 0; which 
is the desired conclusion. □ 

A slightly stronger hypothesis on n than that of Theorem l3.1l but perhaps easier to remember, 
is that the multiplicative group of a field F^ which contains a subgroup [/„ of order n has order 
at least the fourth power of the index of Un- 
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Corollary 3.2. If q = 2" and t > A, then (g* - l)/{q - 1) = gf'^^) H h 9 + 1 belongs to ^2- 

Proof. Set n = (g* — l)/(g — 1). Because i > 4 we have {q — 1)^ < — 1, and hence 

- (g* - i)V('z - 1)' > (g* - 1)' > (g* - n)^ 

Since n divides — 1 the conclusion follows from Theorem 13. II □ 

ProDOsition l2.2l and Corollarv l3.2l together say that (g* — — 1) belongs to J\f2 for all i > 3, 
where g = 2^* as above. However, the case t — i^ which we have proved directly in ProDOsition l2.2l 
does not follow from Theorem 13.11 (See Proposition 14.41 for a direct proof in case t = 4.) 
Furthermore, their joint statement does not extend to t = 2, because [q^ — 1) / {q — 1) = q+\ G M2 
if and only if s is odd. In fact, modulo — a; — c we have x"^ = x + c + c? + + ■ ■ ■ + c*/^, and 
hence 2;'+-^ = + x{c + + + • • • + c^/^) = x(l + c + + • • • + c'*/^) + c. Since this equals 
1 if and only if c = 1 and s is odd, our claim follows according to condition (3) of Theorem 12. II 
However, when s is odd the number g + 1 is a multiple of 3, and hence is a trivial clement of A/'2. 

CoroUarv 13.21 produces the next smallest non-trivial element of M2 after 73, namely, 85 = 
(2^ - l)/(22 - 1). Most of the elements of M2 given by Proposition 12.21 and Corollary |S21 are 
proper multiples of other numbers of the same form. In Proposition 13.41 we determine those 
which are not. Of course, the numbers (g* — l)/(g — 1) with t > 3 and their multiples do not 
exhaust J\f2 , and we give a few numerical examples in Remark 13.61 

We will need a few elementary facts about integers of the form — 1, where p is a prime 
number. The simplest is that p° — 1 divides p'' — 1 if and only if a divides h. In fact, this is true if 
p is any integer different from 0, ±1 or —2. However, the case where p is a prime admits a more 
elegant proof (leaving aside the trivial case where a = 0, and hence 6 = 0) by viewing p° — 1 as 
the order of the multiplicative group of the field Fpa , and noting that Fpa is a subfield of F^t if 
and only if a divides h. It follows that (p" — 1, — 1) = p(°-^^) — 1 for any positive integers a, b 
(where (a, 6) denotes the greatest common divisor of a and b). Furthermore, (p"'' — l)/(p'' — 1) 
divides {p"'"' - l)/(p^'= - 1) if (a, c) = 1. In fact, since both p"^ - 1 and p''" - 1 divide p''^' ~ 1, 
and [p''^ - 1, p^'^ - 1) = p'' - 1, we have that (p"'' - l)(p''^ - 1) divides {p"^" - l)(p'' - 1), whence 
the conclusion. We record the next fact as a lemma. 

Lemma 3.3. Let p and r be primes (not necessarily distinct). Then the integers {jf ^ — 
l)/(p'^ ^ 1) o.'"'^ pairwise coprime, for a > 0. 

Proof. Let g be a prime divisor of {p^ ^ — l)/{p^ ~ !)■ Then the image of p'' in F^ is a root 
of the polynomial {x'' — l)/(a; — 1) G Fq[a;]. Hence the image of p in F^ is a nonzero element of 
multiplicative order (exactly) r""*'^. In particular, q determines a uniquely, and the conclusion 
follows. □ 

Proposition 3.4. Every integer of the form (g* — 1) / {q — 1) with g = 2* and t > 3 is a multiple 
of at least one element of the set 



B = 



- 1 2'' - 1 



22" - 1 ' 2'-'' - 1 



r e P \ {2}, a > 0, 6 > 



where P denotes the set of prime numbers. The elements of B are pairwise coprime, with the only 
exception of pairs of elements (2^ — l)/(2^ — 1) for consecutive values of a, where one has 
/22 -122 -l\ 2^ -1 

which does not belong to J\2- In particular, no element of 



I 22" - 1 ' 22"+' - 1 / 22"+' - 1' 
B is a proper multiple of any number of the form (g* — l)/(g — 1) with q — 2"^ and t > 3. 

Proof. Consider (g* — l)/(g — 1), for some t > 3. 

If t is divisible by an odd prime r, then (g* — l)/(g — 1) is a multiple of (g'' — l)/(g — 1). Write 
s — r'^ ■ c with c prime to r. Then (g'' — l)/(g — 1) is a multiple of (2'"''^^ — l)/(2'"'' — 1). 
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If t is not divisible by an odd prime, then it is a power of two greater than two, and hence 
((7* - l)/(q- 1) is a multiple of (g^ _ _ l). Write s = 2" -c with c odd. Then {q^-l)/{q-l) 
is a multiple of (22°^' - l)/(22° - 1). 

The coprimality statement follows at once from Lemma 13.31 □ 

Note that the expression {q* — l)/{q — 1) with q = 2'^ and t > 2> includes, by taking s — 1, 
all integers of the form 2^ — 1 with the exception of 3. One may like to include this case to 
embrace all numbers in M2 for which we have found explicit parametric expressions, as follows. 
All numbers in A/2 which have some divisor of the form 2^ — 1 or (g* — l)/(q — 1) with q — 2'' 
and i > 3, have also a divisor in the subset B U {3} of N2- In this context we may add that all 
numbers in B are prime to 3, except for (2^ — l)/(2^ — 1) = 15. In particular, no element of 
[B \ {15}) U {3} is a proper multiple of any other number of the form 2*^ — 1 or (g* — l)/{q — \) 
with q = 2"^ and t > 3. 

Corollary 3.5. For any positive integer k which is divisible by 8 or by the square of an odd 
prime, there is a proper divisor of 2^ — 1 in A2 which is not a multiple of any number of the 
form 2^-1. 

Proof. If fc is a multiple of 8 then 2*^ - 1 is a multiple of 85 = (2^ - l)l{2'^ - 1). If fc is a muhiple 
of for an odd prime r, then 2^ — 1 is a multiple of (2'' -l)/(2''-l). Since the latter belongs 
to B, it is not a multiple of any number of the form 2^* — 1, according to ProDOsition l3.4l and the 
comments which follow it. □ 

Remark 3.6. Computer calculations based on Lemma |4. II have shown that the elements of Af2 
which are less than 50000, which are not proper multiples of other elements of A/'2, and are not of 
the form 2^ - 1, are 73, 85, 3133, 4369, 11275 and 49981. The first, second and fourth number in 
this list are predicted bv PropositionlOand CoroUarvIO being (2^-l)/(23-l), (2S-l)/(22-l) 

and (2^^ — l)/(2** — 1). The remaining numbers can be expressed as 3133 = ^(28ri")y2^6ri")^ = 

|F;,4 : (F;8,F;6)|, 11275 = = |F;2o : (F;5,F;,)|, and 49981 = gulggi;] = [F^^o : 

(F;io,F*e)|. Since 3133 < (224)0-484^ ^^21^ ^ 4998^ ^2?o■^^■^^^ , these last three 

numbers are quite far from the range of elements of M2 produced by Theorem 13. II which are, 
roughly, the divisors of 2*^ — 1 greater than (2'^)°-^^. 



4. Counting lines 

We have observed after the proof of Theorem l2.1l that the positive integers n prime to p which 
belong to TVp are those for which Un contains an affine Fp-line with direction 1. More generally, 
one may ask for the number of Fp-lines with direction 1 contained in the subgroup Un of of 
order n, for specific values of n. The significance of this more general question for Lie algebras, if 
any, is not clear. However, it is not unreasonable to expect that posing a more general question 
may help to gain a better understanding of the set Mp. Furthermore, some of the results of this 
section do have a constructive value for Lie algebras, which we discuss in R.emark l4.5l 

We introduce some further notation. For n prime to p we denote by Ep{n) the set of elements 
a £Un such that a + A G J7„ for all A £ Fp, and by ep{n) the cardinality of Ep{n). The greatest 
common divisor of the p polynomials {x + A)" — 1 for A = 0, . . . ,p — 1 has exactly the elements 
of Ep{n) as roots, each with multiplicity one. In particular, its degree equals ep{n). Note that 
the number of affine Fp-lincs with direction 1 contained in Un equals ep{n)/p. For example, 
since Ep{p^ — 1) = Fpt \ Fp we have ep{p^ — 1) = p^ — p. In the sequel we collect some less 
trivial cases where we can compute ep{n) by determining the greatest common divisor of the 
polynomials (x + A)" — 1 for A = 0, ... ,p — 1, thus giving a quite exphcit description of the set 
Ep{n). We will need the following result, which describes an alternative method for finding the 
greatest common divisor of the polynomials {x + A)" — 1 for A = 0, . . . ,p — 1 and, in particular, 
its degree ep{n). 
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Lemma 4.1. Let n be prime to p. Write the remainder of the division of — 1 by — x — c 
(with respect to the indeterminate x, and in characteristic p) in the form rp^i{c)x^^^ + • • • + 
ri{c)x + 7'o(c), where the coefficients rp_i(c), . . . ,ro(c) are polynomials in the indeterminate c. 
Let g{c) — {rp-i (c), . . . , 7'o(c)) be the greatest common divisor of the coefficients. Then g{x^ — x) 
equals the greatest common divisor of the polynomials {x + A)" — 1 for A = 0, . . . ,p — 1. In 
particular, ep{n) equals p times the degree of the polynomial g{c). 

Proof. Since a,a + \,...^a+p~l are the roots of the polynomial x^ — x — (dP — a), an element 
a e Fp belongs to Ep(n) if and only li x^ ~ x ~ c divides — 1, where c = — a. This occurs 
if and only if rp_i(c) — ■ ■ ■ — r^ic) — Q, or, in turn, if and only if c is a root of g{c). Thus 
Ep{n), which is the set of roots of the greatest common divisor of the polynomials {x + A)" — 1 
for A = 0, ... ,p — 1, is also the set of roots of g{xP — x). To complete the proof it remains to 
show that the polynomial g{c) has no multiple roots. 
Write 

- 1 = rp_i(c)a;P"^ H h ri(c).T + ro(c) + Q{x,c){xP -x-c). 

Differentiating with respect to c we obtain 

= r'p_^{c)xP-'^ + ■■■ + r[{c)x + r^,(c) + Q^x, c){xP ~ x - c) ~ Q{x, c), 

where Qc denotes the partial derivative of Q with respect to c. Suppose for a contradiction 
that g{c) has a multiple root c. Then all of rp_i(c), . . . ,ro(c) have c as a root with multiplicity 
greater than one, and so c will be a root of their derivatives, too. Substituting c for c in our two 
equalities we obtain x" — 1 = Q{x, c){xP — x ~c), and = Qc{x, c){xP — x ~c) ~ Q{x, c), whence 
x"^ — 1 = Qc{x, c){xP — X ~ cf' . This implies that — 1 has multiple roots, contradicting our 
assumption that n is prime to p. □ 

Remark 4.2. Lemma l4 . II implicitlv gives a convenient algorithm for computing ep{n) for a given 
integer n. In fact, we have used that algorithm to compute tables of elements in Ap for various 
small primes p, as we have partially reported in Remark l3.6l for p ^ 2. A more obvious algorithm, 
based on condition (2) of Theorem 12 . II rather than on condition (3), is computing ep{n) as the 
degree of the greatest common divisor of the p polynomials {x + A)" — 1 for A = 0, . . . ,p — 1. 
The algorithm given by Lemma l4. II despite being slightly inferior for the computation of ep(n) 
for a specific value of n, performs better than the other in determining ep(n) for a long sequence 
of consecutive values of n. This is essentially because computing the remainder of the division 
of a;" — 1 by a;^ — a; — c is very fast when the remainder of the division of x"~^ — 1 hy x^ ^ x ~ c 
is already available, while the other algorithm does not allow such a reduction. 

We now apply Lemma [4. II to refine the statement that g + 1 G where q — 2^, if and only 
if s is odd, which we have shown in the paragraph following CoroUarv 13.21 In fact, the same 
calculation done there shows that g{c) = c— 1 or 1 (and hence (a;'+^ — 1, (a;+l)''+^ — 1) = g(x'^+x) 
equals x'^+x + 1 or 1) according as s is odd or even. Consequently, we have e2{q+l) = 1 — (— 1)'*. 
Now we use Lemma [4. II to compute e2(n) for n = [q'^ — l)/('7 — 1) = g^ + ? + 1. 

Proposition 4.3. Let q = 2'^ . Then the greatest common divisor {x'^ +9+1 _ \^ [x+lY +9+1 — 1) 
equals (x^+i +x+ l)(a;«+i + a;"? + 1) for s odd and (a;9+i + a; + l){x''+^ + a;"? + l)/(a;2 + a; + 1) 
for s even. In particular, we have 62(9^ + q+l) = 2q+l — (—1)'*. 

Proof. Let n = q^ + q + 1. All congruences will tacitly be modulo a;^ + a; + c. An easy induction, 
already employed elsewhere, shows that a;' = x + j, where 7 = J2iZo c^' ; ^^'^ so a;' = (a; + 7)' = 
3:^ + 7 + 7'. It follows that 

x''^^'^^'^ = (a; + 7 + 7'')(a: + 7)a; = (a: + 7 + 7'')(a;(l +7) + c) 

= a;2(l + 7) + a;((7 + 7«)(1 + 7) + c) + (7 + 7«)c 

= a;((l+7 + 7«)(l+7) + c) + (l+7«)c. 

Hence, we have a:" — 1 = ri(c)a;+r'o(c), where ri(c) ~ (l+7+7')(l+7)+c and ro(c) = (l+7')c+l. 
In order to apply Lemma [4. II we need to compute g{c) — {ri{c), fo(c)). 
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Since 7^ + 7 = c'^ + c we have 

ri(c) • c + ro(c) • (7 + 1) = (7(1 + 7) + c)c + (1 + 7) = c'^+i + 7 + 1. 

Therefore, g{c) divides c*"''^ + 7+ 1. ActuaUy, the derivative criterion shows that 1 is a muhiple 
root of c''+^ +7 + 1 when s is even. Since g{c) has no multiple roots, it must divide (c'+-^ + 
7 + l)/(c + 1) in that case. (Incidentally, we know that 1 must be a root of g{c) when s is even 
because x'^ + x + 1, which divides x^ — 1, divides also x'^ +9+1 — 1 in that case.) According to 
Lemma 01 it follows that 62(9^ + g + 1) = 2 • deg(g(c)) <2q+l- 

Now we prove the reverse inequality. In the proof of Proposition 12 . 21 we have shown that any 
root a of the polynomial x'^'^^ + a: + 1 satisfies a'^ +9+1 = 1 and {a + l)"* +9+^ = 1. Note also 
that if any a satisfies both these conditions, then (Q: + l)/a = l + l/a also does. Therefore, the 
roots of the reciprocal polynomial +x'' + 1 of 2;'+^ +x+l also satisfy {a, a + 1} C Uq2^q_^_i, 
and so do all roots of the product {x"^^^ + x + l){x'^^^ + x'^ + 1). Since each of the two factors 
has no multiple roots, and their greatest common divisor is or 1 or + a; + 1 according as s is 
odd or even, we conclude that \E2{q^ + <? + 1)1 > 2(? + 1 - (-l)^ 

Taking into account the first part of the proof, equality holds here. It follows that g{x'^ + x) 
equals + x + l)(a;«+i + a;« + 1) for s odd and (x'+i + x + l)(x«+i + a;« + l)/{x^ + a; + 1) 

for s even. □ 

The fact that the polynomial g{x^ — x) = (x" — l,(a; + l)" — l)is divisible by such a nice 
trinomial as x"^^-^ +a; + 1 is the reason why the case t = 3 of n = (g* — l)/(q — 1) can be dealt with 
so explicitly in Propositions 12.21 and 14.31 Such explicitness seems not easy to achieve when t > 3. 
In particular, already when t = 4 one has to work harder just to prove that g{x^ — x) is not 
constant, as in the proof of the following result. As noted in the Introduction, Proposition 14.41 
is also a consequence of Corollary 13. 21 but its direct proof given here has an added value which 
we point out in Remark 14.51 

Proposition 4.4. If q ^ 2^ , then the number (q'* — l)/(<7 — 1) = q"'' + + g + 1 belongs to Af2- 

Proof. Consider the polynomial x'^ + a; + 1 over F2. Any root a of this polynomial in F2 is 

2 2 
Galois conjugate to a + 1, because = a + 1. Therefore, every divisor of x'' + a; + 1 over F2 

2 

is invariant under the substitution x ^ a; + 1. Furthermore, the period of x^ + x + 1 divides 
q"^ — 1, because a'^ = {a + l)"* = q'' + 1 = a. Since 

^q'W+q+l = (a;9' + l)9+l EE ((x + l)x)''+^ ^ 1 (mod x"' + X + 1), 

the period of x'^^ + x + 1 docs not divide q'^ + q^ + q + 1. However, the period of the greatest 
common divisor h{x) of {x^ + x)'?+^ — 1 and x* + x + 1 does divide q"^ + q^ + q + 1. Since we 
have seen that /i(x) must be invariant under the substitution x i— > x + 1, for any of its roots a 
the orders of both a and a + 1 divide q"^ + q^ + q + 1. In order to conclude that this number 
belongs to J\f2 it remains to show that h{x) is not a constant polynomial. 

Since the polynomials (x^+x)'^^'^ — 1 and x^ +.x + l can be obtained by substituting x^+x for 
y in y'^^^ — 1 and + + • ■ • + j/^ + y + 1, it is enough to prove that these two polynomials 

2 

in the indeterminate y have a nonconstant common factor. The latter polynomial divides y"^ —y, 
and hence F^2 contains a splitting field for it. In fact, the roots of that polynomials consist of all 
elements of Fg2 of absolute trace 1. The roots of the former polynomial form the subgroup of F*2 
of order g + 1, and hence span F^2 over F2. (Any multiplicative subgroup spans a subfield, which 
must coincide with the whole field in this case.) Consequently, they cannot be all contained in 
the F2-hyperplane of ¥^2 consisting of the elements of absolute trace zero. We conclude that the 
two polynomials have a common root in ¥g2 , and hence a common factor over F2 . □ 

Remark 4.5. The construction of a non-nilpotent Lie algebra with a nonsingular derivation of 
order n given in |Mat02[ Theorem 2.1] requires an element a 6 Ep(n), that is, a common root of 
the polynomials (x + A)" — 1 for A = 0, . . . ,p — 1. In order to explicitly construct an admissible 
element a of Fp in specific instances, it is therefore of interest to produce a common divisor of 
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these polynomials over the prime field Fp, having relatively low degree with respect to n. The 
proofs of ProDOsitions l2.2l and l4.4l arc both based on producing such a common divisor, namely, 
a;*+^ + a; + 1 in the former case and the polynomial denoted by h{x) in the latter. In the latter 
case, we have given h{x) as the greatest common divisor of two further polynomials, of degrees 
2q + 2 and q^, which are both much smaller than n when q is large. In this sense, the proofs 
of Propositions 12.21 and 14.41 have a constructive character which is missing in the method of 
Sectional We have been unable to explicitly produce such a common divisor (and thus a proof 
analogous to those just mentioned) in case n = {q* — l)/{q — 1) with t > 4. 

We conclude this section by computing ep{n) for n — [pP — l)/{p — 1), thus providing a proof 
for an equivalent statement mentioned at the end of Section 3 of |Mat02| . 

Proposition 4.6. Letn= {p'^ — l)/(p~l) . Then the greatest common divisor of the polynomials 
{x + A)" — 1 for X — 0, . . . ,p — 1 equals x^ — x — 1. Consequently, we have ep{n) — p. 

Proof. We prepare for an application of Lemma l4. II Induction shows that 



= X + (mod — X — c) 

for aU i > 0. It follows that x" - 1 = a;i+P+p'+ - +p''"' _ i is congruent to 

/i(x,c) := x{x + c)(x ^c^d')---{x + c^(? ^ 1- c^""') - 1 

modulo x^ — X — c. Since h{x) has leading term x^, the remainder of the division of x" — 1 by 
xP — X — c required by Lemma f4. II equals h{x,c) — (x^ — x — c). It follows that ro(c) — c — 1, 
and hence the greatest common divisor g{c) of the coefficients of the remainder divides c — 1. 
However, the remainder vanishes for c = 1, because h{x, 1) = x^ — x — I, and we conclude that 
5(c) □ 

It is worth noting that n — (jf — l)/(p — 1) is one case where ep{n) assumes its smallest 
possible positive value. With an imprecise but perhaps suggestive phrasing, we may say that 
"n — {pP — l)/{p — 1) does belong to Afp, but just barely" . 

Remark 4.7. The full set of afhne Fp-lines contained in the multiplicative subgroup C/„ of ¥pp 
with n = {pP — l)/(p — 1) forms an interesting configuration. In fact, it follows easily from 
ProDOsition l4. 61 that Un contains exactly n afhne Fp-lines, one for every possible direction. More 
precisely, for every f3 G Un the unique affine Fp-linc in [/„ with direction /? consists of the roots 
of the polynomial x^ — pP~^x — (3^ . This also implies that each element of Un belongs to exactly 
p of these lines. 
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